rkhunter -c

System checks
* Allround tests
   Checking hostname... Found. Hostname is linux-xxxl
   Checking for passwordless user accounts... OK
   Checking for differences in user accounts... Found differences
   Info:
----------------------
< dovecot:x:110:112:User for Dovecot imapd:/var/run/dovecot:/bin/false
< festival:x:112:114:Festival daemon:/usr/share/festival/:/bin/false
< gdm:x:113:115:Gnome Display Manager daemon:/var/lib/gdm:/bin/false
< icecream:x:111:113:Icecream Daemon:/var/cache/icecream:/bin/false
< man:x:13:62:Manual pages viewer:/var/cache/man:/bin/bash
< news:x:9:13:News system:/etc/news:/bin/bash
< uucp:x:10:14:Unix-to-Unix CoPy system:/etc/uucp:/bin/bash
< +::::::/sbin/nologin
> dovecot:x:110:112:User for Dovecot imapd:/var/run/dovecot:/bin/false
> icecream:x:111:113:Icecream Daemon:/var/cache/icecream:/bin/false
> man:x:13:62:Manual pages viewer:/var/cache/man:/bin/bash
> news:x:9:13:News system:/etc/news:/bin/bash
> uucp:x:10:14:Unix-to-Unix CoPy system:/etc/uucp:/bin/bash
> festival:x:112:114:Festival daemon:/usr/share/festival/:/bin/false
> gdm:x:113:115:Gnome Display Manager daemon:/var/lib/gdm:/bin/false
----------------------
   Info: Some items have been added (items marked with '<')
   Info: Some items have been removed (items marked with '>')
   Checking for differences in user groups... Found differences
   Info:
----------------------
< dovecot:!:112:
< festival:!:114:
< gdm:!:115:
< icecream:!:113:
< +:::
> dovecot:!:112:
> icecream:!:113:
> festival:!:114:
> gdm:!:115:

Application advisories
* Application scan
   Checking Apache2 modules ...                               [ Not found ]
   Checking Apache configuration ...                          [ OK ]

* Application version scan
   - GnuPG 2.0.4-svn0                                         [ Unknown ]
   - Bind DNS 9.4.1-P1                                        [ Unknown ]
   - OpenSSL 0.9.8e                                           [ Vulnerable ]
   - PHP 5.2.5                                                [ Unknown ]
   - Procmail MTA 3.22                                        [ Vulnerable ]
   - OpenSSH 4.6p1                                            [ Vulnerable ]

Your system contains some unknown version numbers. Please run Rootkit Hunter
with the --update parameter or fill in the contact form (www.rootkit.nl)

linux-wrall:/ # rkhunter --update
Running updater...

Mirrorfile /var/lib/rkhunter/db/mirrors.dat rotated
Using mirror http://rkhunter.sourceforge.net
[DB] Mirror file                      : Up to date
[DB] MD5 hashes system binaries       : Up to date
[DB] Operating System information     : Mirror outdated. Skipped
  Info (current version: 2009111401, version of mirror: 2007061401)
[DB] MD5 blacklisted tools/binaries   : Up to date
[DB] Known good program versions      : Up to date
[DB] Known bad program versions       : Up to date




Ready.

http://www.howtoforge.com/perfect_server_opensuse10.3_p5

Application advisories
* Application scan
   Checking Apache2 modules ...                               [ Not found ]
   Checking Apache configuration ...                          [ OK ]

* Application version scan
   - GnuPG 2.0.4-svn0                                         [ Unknown ]
   - Bind DNS 9.4.1-P1                                        [ Unknown ]
   - OpenSSL 0.9.8e                                           [ Vulnerable ]
   - PHP 5.2.5                                                [ Unknown ]
   - Procmail MTA 3.22                                        [ Vulnerable ]
   - OpenSSH 4.6p1                                            [ Vulnerable ]

Your system contains some unknown version numbers. Please run Rootkit Hunter
with the --update parameter or fill in the contact form (www.rootkit.nl)


Security advisories
* Check: Groups and Accounts
   Searching for /etc/passwd...                               [ Found ]
   Checking users with UID '0' (root)...                      [ OK ]

* Check: SSH
   Searching for sshd_config...
   Found /etc/ssh/sshd_config
   Checking for allowed root login...                         [ OK (Remote root login permitted by explicit option) ]
   Checking for allowed protocols...                          [ OK (Only SSH2 allowed) ]

* Check: Events and Logging
   Search for syslog configuration...                         [ OK ]
   Checking for running syslog slave...                       [ OK ]
   Checking for logging to remote system...                   [ OK (no remote logging) ]

[Press <ENTER> to continue]



---------------------------- Scan results ----------------------------

MD5
MD5 compared: 0
Incorrect MD5 checksums: 0

File scan
Scanned files: 342
Possible infected files: 0

Application scan
Vulnerable applications: 3

Scanning took 110 seconds